Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/cb8e2b63-db40-4825-9c5a-943662c198a5.roa
File: cb8e2b63-db40-4825-9c5a-943662c198a5.roa (raw, json)
Hash identifier: iepWC/a7qAUX3Bf6zzQO1qw1s0MlVLYuqC67/v1upRU=
Subject key identifier: 2A:0C:D6:A9:C9:65:B8:86:8F:73:1D:A8:B1:68:31:9E:7B:8B:8E:50
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 0ED6DD4DAA821EEBAB0D26363E33B04AAA50CF84
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/cb8e2b63-db40-4825-9c5a-943662c198a5.roa
Signing time: Mon 26 May 2025 15:10:24 +0000
ROA not before: Mon 26 May 2025 15:10:24 +0000
ROA not after: Mon 30 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:7840::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d6:dd:4d:aa:82:1e:eb:ab:0d:26:36:3e:33:b0:4a:aa:50:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: May 26 15:10:24 2025 GMT
Not After : Jun 30 23:59:59 2025 GMT
Subject: serialNumber=25f6acfc88ee6d3af8f151f35beaf01643d23af514d8edb9c7602e12fc4926e2, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:94:50:83:0b:c1:8d:c8:b0:9c:f8:12:25:
ea:f2:1b:62:f3:d8:f0:06:fd:cf:62:52:00:62:25:
06:f6:12:b4:cd:ae:18:80:10:db:a2:51:47:57:c3:
38:43:08:a5:7e:24:cc:b3:37:9e:89:a7:2c:53:f9:
a2:2e:df:5c:81:71:bd:7a:ac:b6:c4:05:cf:bc:ea:
dc:11:67:1e:6a:be:a9:df:78:00:2e:fa:d9:b0:0d:
92:ef:9d:2b:55:96:78:d3:b5:c6:b1:1f:76:d4:fb:
0c:e4:d1:8e:52:2a:80:a2:36:9c:47:ae:19:c5:97:
9b:32:6f:d2:45:2b:8b:15:39:31:eb:fa:23:9f:7b:
fa:35:a6:2f:01:31:e2:4a:54:b5:38:d7:c0:91:33:
da:7c:fd:76:e5:74:43:98:5e:29:ec:b1:e2:ee:61:
41:44:aa:85:93:c9:9a:69:ec:ae:ba:d8:fa:8b:78:
0f:a0:0d:e8:de:4a:40:fc:5e:02:a1:69:b6:a6:29:
bd:ec:ff:d4:d7:8f:c3:4f:4e:11:a7:72:a4:47:df:
c7:d3:ad:2b:5e:ca:81:6e:9c:61:29:55:d0:e2:8b:
8e:f7:22:a1:c2:28:c9:ec:fe:06:6c:fb:04:34:0a:
7a:88:8e:39:a3:5e:4a:b7:a8:b4:c2:0d:bb:97:82:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:D6:A9:C9:65:B8:86:8F:73:1D:A8:B1:68:31:9E:7B:8B:8E:50
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/cb8e2b63-db40-4825-9c5a-943662c198a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:7840::/46
Signature Algorithm: sha256WithRSAEncryption
8d:f1:f8:51:86:c2:b7:ea:e4:c7:06:8b:e3:e4:cd:ec:2a:e7:
95:0f:10:7d:43:a6:b5:f3:7a:f7:f9:ed:1d:b6:77:75:a6:51:
ba:69:08:d7:68:38:1c:b8:4c:8d:73:4a:70:70:7a:b1:e3:82:
ad:1c:cd:16:cc:c9:35:75:6e:ed:df:dc:a1:54:80:1e:8e:df:
27:1d:32:02:27:75:50:8a:fb:a3:2e:5d:0c:be:67:5e:66:e6:
c6:d0:0f:f5:72:7d:02:a2:11:e3:56:27:02:cc:a6:57:24:5f:
10:a5:70:25:8d:fc:19:a3:23:d0:2a:94:65:bc:7a:91:e6:f1:
a9:4f:0a:de:6b:03:b7:7c:f7:5a:21:84:29:6b:75:24:29:7a:
43:47:f4:e5:ec:6e:a1:d8:12:91:f4:7f:1e:50:ee:bf:6a:5b:
9e:37:a0:07:b2:4d:e2:bb:c9:46:c4:24:e6:43:02:f6:49:6c:
44:57:3d:3d:fd:0e:13:d8:59:60:e2:44:46:fc:3b:65:db:03:
6c:4e:fa:e5:c7:d7:3c:77:6a:bd:6f:a9:96:cf:e0:96:9b:61:
7b:3f:0e:a8:5a:e1:66:61:02:23:fe:98:17:62:1f:63:04:69:
e7:4a:fb:4b:d5:cc:ad:9a:e8:47:40:30:28:2c:e2:12:7c:86:
d5:b9:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:51:46 2025 by rpki-client